The UAE Cybersecurity Council has issued a warning about a rise in scams involving fake QR codes placed in public areas to steal personal and banking information.
These scams involve fraudsters placing fake QR code stickers on signboards or digital service areas to trick people into scanning them. Once scanned, the codes redirect users to fake websites that may ask for personal details, banking information, or even install malware on devices.
What to Watch Out For
The Council urges the public to stay alert when using QR codes, especially those found in public spaces like transport stops, parks, or notice boards.
Warning signs include:
- Multiple layers of stickers in one location
- Suspicious links after scanning
- Websites with spelling errors or strange requests for data
Dr Mohamed Al Kuwaiti, Head of the UAE Cybersecurity Council, explained that scammers use QR codes to install “redirect links” that can lead to phishing websites. He said that while QR codes offer convenience, they also pose cybersecurity risks if not used carefully.
How to Avoid QR Code Scams
Dr Al Kuwaiti shared a few important safety tips:
- Only scan codes from trusted locations
- Check the link before opening it – avoid those not starting with “https”
- Use link-checking or QR code scanner apps with security features
- Enable phone protection settings
- Never scan random QR codes from unknown sources
What To Do If You Fall for a Scam
If you believe you’ve been scammed:
- Contact your bank immediately to freeze the cards
- Scan your device for malware
- Change all passwords
- Report the incident to the authorities
Real-Life Scam Examples in the UAE
- Public Transport: A commuter scans a QR code at a bus stop labelled “Check your route.” Instead of the RTA website, it links to a fake login page asking for personal data.
- Public Park: A visitor scans a sticker, thinking it provides park info. They’re redirected to a site that asks for a bank card photo and other personal details.
Authorities such as Dubai’s Roads and Transport Authority (RTA) have previously warned about similar scams.
National Cybersecurity Efforts
The Cybersecurity Council is actively working with digital service providers to:
- Secure QR code use
- Enforce stricter security standards
- Run awareness campaigns
- Monitor threats and respond quickly
